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PATENT 

Atty. Dkt. No.. 7156-101XX/101 12637 




IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



APPLICANT: Dongguyn KIM, et al. 

SERIAL NO.: 10/018.944 

FILED: December 17, 2001 

FOR: METHOD FOR TRANSMITTING 

BINARY INFORMATION WITH SECURITY 



Examiner: unassigned 
Art Unit: unassigned 



SECOND PRELIMINARY AMENDMENT 



January 15, 2002 

FULBRIGHT & JAWORSKI L.L.P. 

865 S. Figueroa St, 29™ Floor 
Los Angeles, CA 90017-2571 



Commissioner of Patents and Trademarks 
Washington, DC 20231 



Sir: 

Preliminary to the examination of the above application, please make the 
following amendment to the application. 
IN THE CLAIMS: 

In claim 8, line 1 , please delete "2" and insert -3-. 



REMARKS 

This preliminary amendment is submitted in order to place the claims in 
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PATENT 
Atty. Dkt. No.: 7156-101XX , 



IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

APPLICANT: Dongguyn KIM, et al. 

SERIAL NO.: unassigned 

FILED: December 17, 2001 

FOR: METHOD FOR TRANSMITTING 

BINARY INFORMATION WITH SECURITY 



Examiner: unassigned 
Art Unit: unassigned 



PRELIMINARY AMENDMENT 



December 17, 2001 
FULBRIGHT & JAWORSKI L.L.P. 
865 S. Figueroa St., 29™ Floor 
Los Angeles, CA 90017-2571 



Commissioner of Patents and Trademarks 
Washington, DC 20231 



Sir: 



Preliminary to the examination of the above application, please make the 
following amendments to the application. 
IN THE CLAIMS: 

In claim 4, line 22, please delete "or 3". 

In claim 5, line 5, please delete "or 3". 



Please add the following new claims: 

-7. The method claimed in claim 3, further comprising a step, in case 
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that there does not exist the step for adding r^ to respective elements to the or 
adding rt, for carrying out a permutation function with respect to the matrix of cc^jjj 
composed of n matrices between the step for forming cc^ jj and the step for calculating 
the residue class of M. 



8. The method claimed in claim 2, wherein the step 

for extracting the binary information data includes steps of: 

producing inverse matrices wf' and w/* of the residue 
class operations with respect to the M of the w^ and w^; 

producing a matrix si according to a following formula by 
using the inverse matrices: 



calculating a first comparison value from ^x.Kx,u-^\.^xx.^^^i 
obtaining first binary information of (e^, e,, '^^^) from 
the first comparison value and a super-increasing integer 
. sequence (d^/ d„, di^j); 

calculating a vth comparison value from s^^,^^,^, , , , x.k-,w. 

ki>~s,^,ki,k2j when v has a value of 2 in -^"^ 

obtaining vth binary information of (e^^, e^^j, e«,i,,i) 
from the vth comparison value and a super-increasing integer 
sequence (d^.i.x/ <^.x,x^^x) i and 

iterating the step for calculating the vth comparison 
value and the step for obtaining the vth binary information till 
the V has values from 3 to u. 

#25 105074V I Page 2 of 3 



REMARKS 



This preliminary amendment is submitted in order to place the claims in 



better form for further prosecution. An early action on the merits is awaited. 



Telephone: (213) 892-9200 
Facsimile: (213) 680-4518 



I hereby certify that this correspondence is being deposited as 
Express Mail EL136021115US in an envelope addressed to: 
Box Patent Application, Commissioner of Patents and 
Trademarks, P.O. Box 2327, Arlington, VA 22202 
on December 17. 2001 



Respectfully submitted, 




Robert BeFurter, ^q. 
Registration N6V 20, 121 




Melinda E. Hallmark 
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J^SgQB^^^^OR^^TRjM^SMITTING BINRRY INFORMATION WITH 



SECURITY 



BACKGROUND OF THE INVENTION 



Field of the Invention 

The present invention relates to a method for transmitting 
binary information through electronic transmission media, and 
more particularly to a method for encrypting and deciphering 
10 binary information in transmission with the use of super- 
increasing matrix sequence . 

Description o£ ttie Related. Axt 

In case of transmitting information through electronic 
transmission media in recent, especially in data transmission 

15 between computers / security matter is being gradually amplified. 
Actually, data transmitted through transmission lines is 
relatively easily overheard/ which means that important 
information can pass to third party' s hands , In order to prevent 
such risk, it is necessary to encrypt information for 

20 transmission not to be easily read by a third party - 

For the encryption of information, various types of 
encryption methods have been proposed. The encryption methods 
are largely classified into a symmetric~key method and a public 
key method* The symmetric key method is a method of using a 

25 deciphering key identical to an encrypting key, and the public 
key method is a method of using a deciphering key different from 
an encrypting key. The symmetric key method has benefits in 
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one-to-one datza transmissions, but has some troublesome problems 
in multi-to-one data transmissions since different encrypting 
keys have to be used. The public key method requires a public 
key open to the public and a private key held by a receiver, so 
5 the public key method has an advantage in the multi-to-onre data 
transmissions. That is, if anyone encrypts information to be 
transmitted by means of the public key, a receiver can deciphers 
the information with a secret key, that is, a private key the 
receiver has. 

10 Such public key encryption method has two important 

elements, which are the safety and efficiency for transmissions. 
The safety for transmissions is determined according to how 
difficult a third party who is not the receiver extracts the 
private key from the public key, and the efficiency for 

15 transmissions is determined according to how easily the public 
key can be produced. 

Lots of studies on the public key transmission system have 
been carried out since a first introduction from Diffie and 
hellman in 1976, and continue to devise safer system. 

20 The RSA is a public key transmission system devised in 

1978 and occupies over 90% of the world market at present. The 
RSA transmission system employs a mathematical matter in which 
the prime factorization of integers is difficult as a basic 
encryption method. However, the RSA transmission system has a 

25 drawback in that a lot of time is required in encryption and 
decryption - 

That is, the RSA transmission system delays an information 
transmission since it takes a long time in generating a 
cryptographic key, which requires a large capacitor of buffers 
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in order to lower or control an information transmission rate of 
a transmitter. In case of requiring the buffers, some actions 
should be taken in order for information not to be lost when a 
signal indicating that a receiving station is not ready for 

5 receiving the information is generated- 

In the meantime, as an alternative for overcoming the 
problem of the RSA transmission system, a public key 
transmission system of a knapsack type has been developed. The 
system is called ""knapsack" since it hides the properties of a 

10 super-increasing integer sequence in the public key. The super- 
increasing integer sequence refers to a set of integers S=(Si, Sg/ 

/-I 

E 

i Sn) composed of positive integers satisfying ^ . The 

system is known to have faster encryption and decryption speeds 

than the RSA transmission system. Hereinafter, the public key 

15 transmission system of the knapsack type will be described in 

detail . 

The public key transmission system of the knapsack type 
includes steps of: producing a private key and a public key as 
in the other public key transmission systems, encrypting 
20 information with the public key; transmitting the encrypted 
signal; and deciphering the transmitted encrypted signal with 
the private key. 

With the steps ramified, the private key is first produced 
and then the public key is produced from the produced private 
25 key. Information is encrypted by using the produced public key 

and then transmitted. A receiver uses the private key to 
decipher the encrypted information. Such step is described as 
below with an example. 
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First of all, a super-increasing integer sequence B is, 
for example, 12, 17, 33, 74, 316, arbitrarily produced. After 
that, a larger number M' , for example 737, than the sum of the 
respective numbers of the super-increasing integer sequence is 
5 arbitrarily selected. After that, A number for example 635, 

is arbitrarily selected which is smaller than the M' and a prime 
number against the M' and vice versa. After that, the super- 
increasing integer seq[uence B is multiplied by the number W and 
an residue class operation is carried out based on the M' , 
10 If the result is put as a public key A^ the A can be 

expressed as follows: 
A=(W*B) (mod M' ) 
= {635* (12, 17, 33, 74, 157, 316) } (mod 737) 
=(250, 477, 319, 559, 200, 196) 
15 Through the above step, a private key(B, M' , W) and the public 
key A can be obtained, but it is not easy to produce the private 
key(B, M' , W) from the public key A through a reverse step. The 
description has been made that the facilitation of the reverse 
operation becomes a barometer of a public key transmission 
20 system. 

Now, a description is made on the steps for encrypting 
information E by the public key A with an example of a binary 
number 101101. 

The information E is encrypted by multiplying the 
25 information E by the public key A. That is, if the encrypted 
information is put as P, the P can be expressed as follows: 

P=A • E 

=(250, 477, 319, 559, 200, 196) • (1, 0, 1, 1, 0, 1)=1324 
So the encryption is accomplished. 
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If transmitting such encrypted signal, the information 
prior to the encryption is extracted from the transmitted signal 
in a receiving stage (deciphering) . The step is as follows. That 
is, the encrypted signal P is multiplied by VJ~\ wherein the W'^ 
5 is a positive integer of satisfying {W*W'M (mod M')=l, and then a 
residue class is obtained based on the M' . If the obtained 
value is Q, the Q is expressed as follows: 
Q=(W-^*P)J[mod M' ) 
=435 

10 where, if the P is substituted with A • E, Q=(W-^*A • E) , and 
then if the A is substituted with (W*B) (mod M' ) , Q={W-' * (W*B) 
(mod M' ) • E} (mod M' ) • 

The W"^ is just a constant, so that the W'^ can be put in the 
parentheses. A residue class regarding the M' of the W"^*W is a 
15 1, so that the result expression is (B • E) (mod ) . If the E 
is defined as (e^, B2, ea, e,, 65, e^) , the result expression is 
re-expressed as follows: 

435={(12, 17, 33, 74, 157, 316) • (e^, €3, 63, e^, es, 
eg)} (mod 737). Here, (12, 17, 33, 74, 157, 316) is the super- 
20 increasing integer sequence, so that the E can be easily 
obtained. That is, the information E=(l, 0, 1, 1, 0, 1) prior 
to the encryption can be easily extracted from 4 35 = 12ei + 17e2 
+ 33e3 + 74e4 + 157e5 + 316e6. 

However, the system is severely affected in its safety by 
25 attack methods developed by Brickell, Lagarias, and Odlyzko, 
Schnor, et al. That is, a private key of a receiver is easily 
found by a third party, so that a problem information data is 
easily leaked has occurred. Most of such attach methods rely 
upon a low density attack method based on the Lattice Basis 
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Reduction Algorithm. A small number of the public key 
transmission systems of the knapsack problem so far, including 
one based on Chor-Rivest/ are known to be safe against such 
attach methods. 

SXJMMZ^Y OF THE INVENTION 

It is an object of the present invention to provide a 
public key transmission system of an improved knapsack type for 
securing higher safety by increasing transmission efficiency by 
easily producing an public key and hardly extracting a private 
key from the public key. 

The present invention provides a public key method of the 
knapsack type using a super-increasing matrix sequence instead 
of a public key of the knapsack type using a super-increasing 
integer sequence. The use of a super-increasing matrix sequence 
in the present invention causes public keys and private keys to 
be extended to matrix sequences having arbitrary dimensions, 
which provides a reason on making the extraction of a private 
key from a public key more difficult. Accordingly, a 
construction of the present invention is the same as the public 
key transmission system using the conventional super-increasing 
integer sequence as stated above, except for producing a super- 
increasing matrix sequence instead of the super-increasing 
integer sequence. A description on such construction will be 
described as follows. That is, the present invention is 
directed to a binary information auxiliary transmission method 
comprising, if Ki and K2 are positive integers, kaxk2 is an 
integer larger than 3, and n is an integer larger than 2, steps 
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of: producing a private key including n matrices composed of 
kixkj; producing a public key including n matrices composed of 
kixkj from the private key; dividing binary information to be 
transmitted into n plural bit sequences E = {ei, e^} , ei e 

5 {0, 1}; encrypting the plural bit sequences E by using 
respective public keys; forming transmission data S by 
incorporating encrypted information; transmitting the 
transmission data S to a receiving station; and extracting 
binary information data from the received transmission data S in 
10 the receiving station by using the private key, wherein the step 
for producing the private key is placed prior to the step for 
extracting the binary information data. 

After producing the public keys, an addition of a random 
number to respective matrices composing of the public keys 
15 and/or the execution of an order change function can make the 
extraction of a private key from the public key difficult. in 
the above case, binary information data E to be transmitted can 
be exactly extracted by adding a certain ntirober and/or executing 
an inverse function of the order change function before 
20 deciphering. 

BRIEF DESCRIPTION OF THE DRAWINGS 



The above object and other advantages of the present 
25 invention will become more apparent by describing the preferred 
embodiment thereof in more detail with reference to the 
accompanying drawings, in which: 

FIG. 1 is a flow chart for showing a process of producing 
a private key and a public key according to an embodiment of the 
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present invention; 

FIG. 2 is a flow chart for showing a encryption process by 
using the public key of FIG. 1; and 

FIG- 3 is a flow chart for showing a deciphering process 
5 by using the private key of FIG. 1. 

DETAILED DESCRIPTION OF THE PREFERRED EtdBODIMENTS 

Hereinafter, the present invention will be described in 
10 more detail with reference to the accompanying drawings. 

FIG- 1 is a flow chart for showing a process of producing 
a private key and a public key according to an embodiment of the 
present invention . 

The process, first, produces a private key (cc^, Wi, Wj, M) , 
15 wherein cc^ indicates n KlxKl super-increasing matrix sequences, 
Wi is a kjxkj matrix, W2 is a kjxkj matrix, which are values 
corresponding to B, W, and M' , respectively, in a public key 
transmission system of a knapsack based on a super-increasing 
integer sec[uence. 

20 First, positive integers k^, kj, li, I2, , lu are 

arbitrarily selected to be kjxkj > 3, 2 < u < kixkj-l, which is 

referred to as . (step 110) . 

Next, n super-increasing integer sequences having a length 

Is with respect to each s(l < s < u) are selected, which is 

25 referred to as d^ = (d^^^, d^.s/ <^s,i) i 1 < s <u(step 120). The 

super-increasing integer sequence means an integer sequence in 

which ds,3 is a positive integer and 
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After that, a super-increasing matrix sequence having a 
matrix size of kiXkij and length n is produced as follows (step 
130). If the matrix sequence is referred to as cc^ = [cCt,(i,j)l in 
l<t<n, l<I<ki, l<j<k2, respective cCt.(i,j, are produced 
as follows. 

© in case of (i,j) = (l/l)/ cc^^.i, = d^^^ in 1 < t < li and 
cctd 1) has a random positive integer satisfying 

ri 

"^^ in li+l < t < n. 

® in case that {i,j) satisfies 2 < (i-l)k2+j < u-1, cc^, 

l</< S Is 



has a random positxve xnteger xn 



xn 



and another random positive integer satisfying 



(/J) (/-1)A:2 

in 

© in case that (i,j) satisfies (i-l)k2+j = u, cc^ti^j, has a 



(M)^2-t/-l 

i<t< S 

random positive integer in and 

^=2 S-\ S-l 

@ in case that (i,j> satisfies u+1 < (i-Dkj+j < k:xk2-l. 
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cc^(i,j, has a random positive integer in 1 < t < n, 

© (i,j) satisfies (i*l)k2+l = x kz, cc^(i,j, = 0 in 
1 < t < n. 

After that, an integer M is selected as follows (step 140) . 
5 That is, a positive integer M satisfying 



is randomly selected. 

Next, n random positive integers ri, r2, r^ are selected 

(step 150) . 

After that, r^ is added to respective elements of a matrix 
10 cCt and then a matrix (referred to as in Formula 1) selecting a 
residue class based on the M is produced (step 160) . 
Formula 1 

Ct.(i,j) ^ cct,ti,j) + r, (mod M) 
After that, a permutation function 71 with respect to {1, 2, 
15 n} -is selected to produce = c, (step 170) . Steps 150 and 
160 for adding to respective elements or a step 170 for 
applying the permutation function can be omitted since they are 
for making the extraction of a private key from public keys 
difficult. 

20 After that, two matrices and having sizes of kjxk^ and 

kzxka respectively are arbitrarily selected to have inverse 
matrices when performing calculations based on a residue class 
of M with respect to matrix elements (step 180). Therefore, the 
private key cCt(or bi, b2/ bn) , Wj, M, and Tl are completed. 

25 Next, a public key is produced from the private key 

obtained from the above (step 190) . 

In the step 190, N matrices, a^., (1 < t < n) are produced 
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as f ollows - 

Respective elements exist between 0 and M with at s 
Wib^WzCmod M) . Accordingly, the public key = (a^, aj, «./ a„) 
are completed. 

5 FIG. 2 is a flow chart for showing an encryption process 

of information to be transmitted by using the public key of FIG. 
1. 

The encryption is perfomed by multiplying the information 
to be transmitted, which is divided into n bits, by the public 
10 key (steps 210 and 220). 

Let E be the information containing only 0 and 1 and 
having a length n. 

That is, E = (e^, e^) , et e {0, 1} 

The encryption is carried out by multiplying information E 

15 to be transmitted by a public key a. If an encrypted signal is 

indicated as S, the S may be .expressed as Formula 2 as below: 

Formula 2 
n 

FIG. 3 is a flow chart for showing a deciphering process 

20 with respect to an encrypted signal. A process for extracting E 
from the encrypted signal s is as follows. 

Wi'^ and W2'^ of residue class operation inverse matrices 
with respect to M of Wj and W2 are calculated and multiplied by s 
to produce a cyphertext of an intermediate step (steps 310 to 
25 330). Let such result be Si, then formula 3 is as follows. 
Formula 3 

Si ^ w/^swx"^ (mod M) 

where, Sj is a matrix satisfying 0 < s^, ^i.jj < M, a formula 
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is 



established. 



The 



reason 



the 



formula 




is established is because W^W^ ^ and W2W2 ^ are 1, 
respectively . 

In the meantime, if e% = e^'^^)/ the following formula is 
effectuated becase of e^ = e',(t) and bt = ,t> • 



Next, a value of (e'l, ^'n) is obtained as follows 



mathematical induction. First, a value of (e'l, e'z^ ^'11) 
becomes a solution of (Xj, Xj, x^i) in the equation of 



obtained since (di,i, di,2/ is a super-increasing integer 

sequence. 

For example, when a value obtained from the calculation of 
Si, (i,i>~Si, (ki, )c2) is ^'130" and a super-increasing integer sequence 
is {30, 74, 147}, a solution becomes 0" since ''130" is smaller 
than "^^147" and a step for comparing "130" with "'74" is carried 
out without any calculation- At this time, the solution is 
processed as ^"1" since 130-74 = 56. Lastly, the solution is set 
to ^'1" since "'56" is larger than "30" when comparing "56" with 
""30". Accordingly, the desired final solution becomes {1, 1, 0}. 
This is generally known to those who are skilled in this field. 

After that, if a value of (e'l, e'2/ -/ e'3) is obtained as 
an assumption of a mathematical induction and w = Ij + I2 + — +lv 




by using a configuration of an appropriate equation and a 




and a value of x^ can be easily 
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in V € {1, 2, .... u~l}, a value of (e'„^i, e'^i^^J is 

obtained as follows. That is, the value is obtained from the 
calculation of the value of (x„+i, x„+2/ x^+j^+i) in an equation 



of when 



=S, - lue 



The use of a super-increasing property of 
civ+i,iv.i) enables a value of (e'„,i, e'^^j. -/ 



^'w+iv+i) to t>e easily obtained. All the values of (e'l, e'j^ — ^ 
e'n) obtained through the mathematical induction method. 

After that, the original message of E = (ei, eg, e„) is 

10 obtained as follows through the use of the property of = e'^^t)- 
That IS/ E = {^if ej/ ...^ e^) = (e'^ , e\ (2)/ —r ^' n in)) 
The signal E prior to the encryption is deciphered through the 
above process. 

The public key transmission system based on this method is 
15 much better in a speed point of view, compared to the other 
public key transmission system and shown in Table 1. 
Table 1 





Present invention 


NTRU 


RSA 


Operation speed 


n 


n^ 


n^ 


Inverse operation speed 


n 


n^ 


n^ 


Operation key length 


n^ 


n 


N 


Inverse operation key length 


n^ 


n 


N 


Message extension degree 


1.5-1 


3 or 4-1 


1-1 



As shown in Table 1, the present invention has a much faster 
20 speed in the encryption and decryption, compared to the existing 
NTRU or RSA system. The matter of prolonging a public key 
length and a private key length does not cause any problem due 
to the improvement of the performance of system memories 
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employed at present. 

A secure binary information transmission method according 
to the present invention can overcome the vulnerability with 
respect to a low density attack method in a public key 
5 transmission system of the knapsack type using a super- 
increasing integer sequence, and also overcome the vulnerability 
in a speed of an RSA transmission system by rapidly realizing 
main operations which are additions or comparisons of two 
numbers in a computer . 

10 Accordingly, the present invention prevents, in case that 

binary information is transmitted through transmission media, 
third parties from easy reading as well as accelerates a 
transmission speed, so it is directly applicable to home banking, 
electronic commerce business, information exchanges on the 

15 internet, and the like. 

Although the preferred embodiment of the present invention 
has been described, it will be understood by those skilled in 
the art that the present invention should not be limited to the 
described preferred embodiment, but various changes and 

20 modifications can be made within the spirit and scope of the 
present invention as defined by the appended claims. 
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CLAIMS 

1. In a method for safely transmitting binary information 
constructed with plural bits through electronic transmission 
5 media, the method comprising steps of: 

producing a private key including n matrices constructed 
with ki X kj, when ki and kj are positive integers, k^ x is an 
integer larger than 3, and n is an integer larger than 2; 

producing a public key (matrix sequence at^) including the n 
10 matrices constituted with the ki x k^ from the private key; 

dividing the binary information into n plural bit 

sequences E = {ei, ez* «./ e^,} in Bi e {0, 1}; 

encrypting the plural bit sequences E respectively by 
using the public key; 
15 incorporating the encrypted information and forming 

encrypted transmission data S; 

transmitting the encrypted transmission data S; and 
extracting the binary information data from the encrypted 
transmission data S by using the private key. 
20 2- The method as claimed in claim 1, wherein the step for 

producing the private key includes steps of: 

forming u super-increasing integer seque^naes d^, dz, d^ 
expressed as d^ ^ (ds^i^ <^a,2/ -/ <is.is} of a super-increasing 
integer sequence having a length 1^ with respect to each S 
25 satisfying a relationship of 1 < s < u, after arbitrarily 
selecting an integer n larger than 2 but less than k^ x kz-l, 
selecting u positive integers l^, I2, and setting the 

integer n of a total sum of li + I2 +/ +lu; 

selecting a random integer* M larger than 
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forming a matrix wl having arbitrary x ki elements and 
a matrix having k2 x k^ elements for which an inverse matrix 
exists when calculations with respect to respective matrix 
5 elements are carried out with a residue class of M; 

forming n matrices cCt, having kj x ks by selecting for 

1) if (i, j) - (1,1), 
a) di^t in 1 < t < li, and 

b) a random positive integer of satisfying 

n 

2 CC^ i)<<3^i 1 

in Ij ^ t < n; 

2) if (i,j) satisfies 2 < (i-l)k2 + 1 < u-1, 

i<t< E /, 

a) a random positive integer in , 

(/-I)*, +/,/- Z 4 
b) in 

(i-i)*2+y-l (/-1)*2+/ 

E /,+i<^< E /, 

15 ^1 , and 

c) a random positive integer satisfying 

n 

r= E /.-^l 2-. /, + l<r<W 

in 

3) if (i,j) satisfies (i-l)k2 + j = u. 
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a) a random positive integer in 



^1 



and 



CC 



=d 



in 



(/-1)A:2+/-1 0-1)^2+/ 




4) if (i,j) satisfies u + 1 s (i-l)k2 + j < x ks-l/ 
a random positive integer in 1 < t < n, and 

5) if (i,j) satisfies (i-ljkj + j = ki x kj/ 
^^0"; and 

calculating a residue class of M as in Ct, s cc^, jj (mod 
M) , wherein the step for producing the public key is 
accomplished by producing at satisfying = cc^^ji jj (mod M) , 
the step for forming the encrypted transmission data S is 
accomplished by producing the S satisfying a formula 



the Wi and is carried out after the step for forming the 
super-increasing matrix sequence cc^ and before the step for 
forming the public key. 

3. The method as claimed in claim 2, further comprising a 
step, after selecting n random positive integers r^, rj, r„, 
for adding r^ to respective elements between the step for 
forming the cc^, and the step for calculating the residue 
class of M. 

4. The method claimed in claim 2 or 3, further comprising 
a step, in case that there does not exist the step for adding r^ 



n 




and the steps for selecting the M and producing 



/ 
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to respective elements to the cc^ or adding r^, for carrying out 
a permutation function with respect to the matrix of cc^.d^j, 
composed of n matrices between the step for forming cct. and 
the step for calculating the residue class of M. 

5. The method claimed in claim 2 or 3, wherein the step 
for extracting the binary information data includes steps of: 

producing inverse matrices Wj"^ and Wz"^ of the residue 
class operations with respect to the M of the w^ and Wz; 

producing a matrix si according to a following formula by 
using the inverse matrices: 

calculating a first comparison value from s^, (i^d-s^^ ^i,y^^2) ^ 
obtaining first binary information of (ei, e^) from 

the first comparison value and a super-^increasing integer 

sequence {d^, di2/ di^i); 

calculating a vth comparison value from + x, v ^. i^(v/k2). 

t;'j 

ia)"Sv, tki.k2j when v has a value of 2 in ; 

obtaining vth binary information of (e„+i, e^2/ —/ ©w+iv+i) 

from the vth comparison value and a super-increasing integer 

sequence dyr^i,2f --f clv+i,iv+i) ; ^nd 

iterating the step for calculating the vth comparison 
value and the step for obtaining the vth binary information till 
the V has values from 3 to u. 

6. The method as claimed in claim 4, wherein the step for 
extracting the binary information data includes steps of: 

forming inverse matrices W^"^ and W2**^ with the residue 
class of M of vii and Wj/ 
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forming a matrix according to a following formula by 
using the inverse matrices: 

-1 



5i = ^e^a^=^ 

^ , wherein ei is a function of 

^"0" and ^^1" and is a matrix of x kj; 

5 calculating a first comparison value from s^, (i^i,-Si^ ^j,i^t2) ; 

obtaining first binary information of (e^, e^i) from 

the first comparison value and a super-increasing integer 
sequence {d^i, di2, .../ d^n) ; 

calculating a vth comparison value from s^, ([v/ic2] * 1, v + iMv/k2j • 

10 kaj-Sv, {fci,k2) when the v has a value of 2 and ; 

obtaining vth binary information of (e„^i, ew+2/ e^+iv+i) 
from the vth comparison value and a super-increasing integer 
sequence (d^+i^i, dv+1.2/ cLv*i,iv+i) ; 

iterating the step for calculating the vth comparison 
15 value and the step for obtaining the vth binary information till 
the V has values from 3 to u; and 

applying an inverse function of the permutation function) 
to the (ei, 62, exn) • 
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FIG. 2 
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